Static task
static1
Behavioral task
behavioral1
Sample
ad9c407fca807e538f7e1903f7a1dcf5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad9c407fca807e538f7e1903f7a1dcf5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad9c407fca807e538f7e1903f7a1dcf5_JaffaCakes118
-
Size
177KB
-
MD5
ad9c407fca807e538f7e1903f7a1dcf5
-
SHA1
7a6e1eea876e50e6345f04f580773b33894a7259
-
SHA256
2c6df6fbdccc1ee994da340e1970e4d2990baac07b6952ff2fc13c963eb9eece
-
SHA512
40cae2bf7267864d7e6045278f7f97a3919ece2d47ff68828585c513a9b146151f2772f1d62231402145014f121c16772112f848878c6bf353314d04853b208b
-
SSDEEP
3072:LkdQ1CnA/W1fOJK/RsMh9D1453kub6dtUJIuTI0NNjiStFev7L:LCA/W1fV/RDwLbe2vtNBiSt87
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad9c407fca807e538f7e1903f7a1dcf5_JaffaCakes118
Files
-
ad9c407fca807e538f7e1903f7a1dcf5_JaffaCakes118.exe windows:4 windows x86 arch:x86
884a9734109037ff1d9cc912432bd46e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
wininet
InternetReadFile
winmm
PlaySoundW
Sections
CODE Size: 159KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE